Skip to content

feat: MCP Governance Gateway#1510

Merged
jpleva91 merged 14 commits intomainfrom
feat/mcp-gateway
Apr 1, 2026
Merged

feat: MCP Governance Gateway#1510
jpleva91 merged 14 commits intomainfrom
feat/mcp-gateway

Conversation

@jpleva91
Copy link
Copy Markdown
Collaborator

@jpleva91 jpleva91 commented Apr 1, 2026

Summary

  • MCP-to-MCP governance proxy — intercepts tool calls between any agent and any MCP tool server
  • Evaluates every call through the existing Go kernel (26 invariants + policy eval)
  • SSE listener, multi-upstream routing, merged tool lists
  • Session-level governance: blast radius, velocity, runaway detection, budget, denial density
  • CLI: agentguard gateway start/status

New: internal/gateway/

  • config.go, normalize.go, session.go, upstream.go, gateway.go, run.go (+ tests)
  • 47 new tests, 464 total (zero regressions)

Test plan

  • 47 gateway tests passing
  • Full go build ./... succeeds
  • Manual: agentguard gateway start --config test.yaml

🤖 Generated with Claude Code

jpleva91 and others added 14 commits March 30, 2026 11:04
…failing, human escalation triggered

4 squads RED (cloud, hq, qa, analytics). Worker pool dead 11 cycles
with April 1 thundering herd imminent. 69.5% agent failure rate.
Cloud squad 5 days stale. v3.0-gate 12 cycles unassigned.
Force-escalating to human per escalation rules.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…0 escalations unresolved, thundering herd <24h

Delta since evening run: PRs #1479 + #1475 merged to main. Zero human action on P0s.
Added shellforge (10th squad) and octi-pulpo full state. Octi-pulpo upgraded to GREEN.
FORCE-ESCALATED: #1402 worker pool, #1306 v3.0-gate, #1452 zombie processes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…ged, sprint KE-3 begins

- Merged octi-pulpo#100 (BudgetStore nil-wire bug — Slack budget cmds now functional)
- Closed workspace#283 (stale CONFLICTING state PR from run 8)
- All P0 director brief items confirmed SHIPPED (budget dispatch, coord_claim, driver health, browser drivers)
- Next sprint: landing page scaffold (#76) + test coverage 23.3%→40% + admission control validation
- Noted sprint store sync lag (#5/#96 show open despite GitHub closed)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…ection

Structured for AI answer engine discoverability — clear problem
statement, concrete examples, answer-friendly phrasing that LLMs
will quote directly.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
OctiBridge sends governance denials and session summaries to Octi
Pulpo's /api/memory endpoint via HTTP. Wired into Claude Code and
Copilot hook handlers. Set OCTI_HTTP_URL to enable. Human CLI
sessions now feed the swarm's episodic memory for self-improving
dispatch.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Defines GatewayConfig, ListenConfig, UpstreamDef, SessionConfig, and
TelemetryConfig types with LoadConfig and applyDefaults functions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Translates MCPToolCall into kernel action.RawAction, extracting well-known
fields (command, file_path, content, target) and providing ActionFingerprint
for runaway detection.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Implements SessionState with blast radius accumulation, velocity throttling,
runaway detection, budget tracking, denial density lockdown, and max denials.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…arding

Implements UpstreamManager with tool registration, routing index, merged
tool lists, and ForwardCall dispatch. Includes UpstreamConnector interface
with placeholder stdio/SSE implementations.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
… pipeline

Implements Gateway struct with SSE listener, JSON-RPC message handler,
full governance pipeline (route -> normalize -> session check -> kernel
propose -> forward/deny), and event emission. Includes JSON-RPC 2.0
request/response types and MCP protocol handling.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…ing, graceful shutdown

Implements Run() for starting the HTTP server, BuildGateway() for full
dependency wiring (kernel, event bus, upstream manager, shipper pipeline),
and graceful shutdown on context cancellation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Wires the MCP gateway into the agentguard CLI with --config flag for
config file path. Supports graceful shutdown via SIGINT/SIGTERM.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@jpleva91 jpleva91 merged commit 127a9bf into main Apr 1, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant